es a letter to the DOJ CD, and obtains the CO's appro al, certifying compliance with the following mquirtments: 1. Media must be encrypted using a NiSi FIPS 140-2 appo ed product., 2. Contractor must daelop and im pkment a process to ensure that security and other applications software is kept up-to-dat